/**

  * Copyright 2005-2011 The Kuali Foundation

  *

  * Licensed under the Educational Community License, Version 2.0 (the "License");

  * you may not use this file except in compliance with the License.

  * You may obtain a copy of the License at

  *

  * http://www.opensource.org/licenses/ecl2.php

  *

  * Unless required by applicable law or agreed to in writing, software

  * distributed under the License is distributed on an "AS IS" BASIS,

  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

  * See the License for the specific language governing permissions and

  * limitations under the License.

  */

 package org.kuali.rice.kim.api.role;

 import org.kuali.rice.core.api.criteria.QueryByCriteria;

 import org.kuali.rice.core.api.delegation.DelegationType;

 import org.kuali.rice.core.api.exception.RiceIllegalArgumentException;

 import org.kuali.rice.core.api.exception.RiceIllegalStateException;

 import org.kuali.rice.core.api.util.jaxb.MapStringStringAdapter;

 import org.kuali.rice.kim.api.KimApiConstants;

 import org.kuali.rice.kim.api.common.delegate.DelegateMember;

 import org.kuali.rice.kim.api.common.delegate.DelegateType;

 import org.springframework.cache.annotation.CacheEvict;

 import org.springframework.cache.annotation.Cacheable;

 import javax.jws.WebMethod;

 import javax.jws.WebParam;

 import javax.jws.WebResult;

 import javax.jws.WebService;

 import javax.jws.soap.SOAPBinding;

 import javax.xml.bind.annotation.XmlElement;

 import javax.xml.bind.annotation.XmlElementWrapper;

 import javax.xml.bind.annotation.adapters.XmlJavaTypeAdapter;

 import java.util.Collection;

 import java.util.List;

 import java.util.Map;

 import java.util.Set;

 /**

  *

  * This service provides operations for querying role and role qualification

  * data.

  *

  * <p>A role is where permissions and responsibilities are granted.  Roles have

  * a membership consisting of principals, groups or even other roles.  By

  * being assigned as members of a role, the associated principals will be

  * granted all permissions and responsibilities that have been granted to the

  * role.

  *

  * <p>Each membership assignment on the role can have a qualification which

  * defines extra information about that particular member of the role.  For

  * example, one may have the role of "Dean" but that can be further qualified

  * by the school they are the dean of, such as "Dean of Computer Science".

  * Authorization checks that are then done in the permission service can pass

  * qualifiers as part of the operation if they want to restrict the subset of

  * the role against which the check is made.

  *

  * @author Kuali Rice Team (rice.collab@kuali.org)

  *

  */

 @WebService(name = "roleService", targetNamespace = KimApiConstants.Namespaces.KIM_NAMESPACE_2_0 )

 @SOAPBinding(style = SOAPBinding.Style.DOCUMENT, use = SOAPBinding.Use.LITERAL, parameterStyle = SOAPBinding.ParameterStyle.WRAPPED)

 public interface RoleService {

     /**

      * This will create a {@link org.kuali.rice.kim.api.role.Role} exactly like the role passed in.

      *

      * @param role the role to create

      * @return the newly created object.  will never be null.

      * @throws IllegalArgumentException if the responsibility is null

      * @throws IllegalStateException if the responsibility is already existing in the system

      */

     @WebMethod(operationName="createRole")

     @WebResult(name = "role")

     @CacheEvict(value={Role.Cache.NAME}, allEntries = true)

     Role createRole(@WebParam(name = "role") Role role)

             throws RiceIllegalArgumentException, RiceIllegalStateException;

     /**

      * This will update a {@link Role}.

      *

      * @param role the role to update

      * @throws IllegalArgumentException if the role is null

      * @throws IllegalStateException if the role does not exist in the system

      */

     @WebMethod(operationName="updateRole")

     @WebResult(name = "role")

     @CacheEvict(value={Role.Cache.NAME}, allEntries = true)

     Role updateRole(@WebParam(name = "role") Role role)

             throws RiceIllegalArgumentException, RiceIllegalStateException;

         /**

          * Get the KIM Role object with the given ID.

          *

          */

     @WebMethod(operationName = "getRole")

     @WebResult(name = "role")

     @Cacheable(value= Role.Cache.NAME, key="'id=' + #p0")

     Role getRole(@WebParam(name = "id") String id) throws RiceIllegalArgumentException;

         /**

          * Get the KIM Role objects for the role IDs in the given List.

          */

     @WebMethod(operationName = "getRoles")

     @XmlElementWrapper(name = "roles", required = true)

     @XmlElement(name = "role", required = false)

     @WebResult(name = "roles")

     @Cacheable(value= Role.Cache.NAME, key="'ids=' + T(org.kuali.rice.core.api.cache.CacheKeyUtils).key(#p0)")

         List<Role> getRoles( @WebParam(name="ids") List<String> ids ) throws RiceIllegalArgumentException;

         /** Get the KIM Role object with the unique combination of namespace, component,

          * and role name.

          *

          */

     @WebMethod(operationName = "getRoleByNameAndNamespaceCode")

     @WebResult(name = "role")

     @Cacheable(value=Role.Cache.NAME, key="'namespaceCode=' + #p0 + '|' + 'name=' + #p1")

     Role getRoleByNameAndNamespaceCode(@WebParam(name = "namespaceCode") String namespaceCode,

             @WebParam(name = "name") String name) throws RiceIllegalArgumentException;

         /**

          * Return the Role ID for the given unique combination of namespace,

          * component and role name.

          */

     @WebMethod(operationName = "getRoleIdByNameAndNamespaceCode")

     @WebResult(name = "roleId")

     @Cacheable(value=Role.Cache.NAME, key="'{getRoleIdByNameAndNamespaceCode}' + 'namespaceCode=' + #p0 + '|' + 'name=' + #p1")

         String getRoleIdByNameAndNamespaceCode(@WebParam(name = "namespaceCode") String namespaceCode,

             @WebParam(name = "name") String name) throws RiceIllegalArgumentException;

         /**

          * Checks whether the role with the given role ID is active.

          *

          * @param id

          * @return

          */

     @WebMethod(operationName = "isRoleActive")

     @WebResult(name = "isRoleActive")

     @Cacheable(value=Role.Cache.NAME, key="'{isRoleActive}' + 'id=' + #p0")

     boolean isRoleActive( @WebParam(name="id") String id ) throws RiceIllegalArgumentException;

     /**

      * Returns a list of role qualifiers that the given principal has without taking into consideration

      * that the principal may be a member via an assigned group or role.  Use in situations where

      * you are only interested in the qualifiers that are directly assigned to the principal.

      */

     @WebMethod(operationName = "getRoleQualifersForPrincipalByRoleIds")

     @XmlElementWrapper(name = "attributes", required = true)

     @XmlElement(name = "attribute", required = false)

     @WebResult(name = "attributes")

     @XmlJavaTypeAdapter(value = MapStringStringAdapter.class)

     List<Map<String, String>> getRoleQualifersForPrincipalByRoleIds(@WebParam(name = "principalId") String principalId,

             @WebParam(name = "roleIds") List<String> roleIds, @WebParam(name = "qualification") @XmlJavaTypeAdapter(

             value = MapStringStringAdapter.class) Map<String, String> qualification)

             throws RiceIllegalArgumentException;

     /**

      * Returns a list of role qualifiers that the given principal has without taking into consideration

      * that the principal may be a member via an assigned group or role.  Use in situations where

      * you are only interested in the qualifiers that are directly assigned to the principal.

      */

     @WebMethod(operationName = "getRoleQualifersForPrincipalByNamespaceAndRolename")

     @XmlElementWrapper(name = "attributes", required = true)

     @XmlElement(name = "attribute", required = false)

     @WebResult(name = "attributes")

     @XmlJavaTypeAdapter(value = MapStringStringAdapter.class)

     List<Map<String, String>> getRoleQualifersForPrincipalByNamespaceAndRolename(

             @WebParam(name = "principalId") String principalId, @WebParam(name = "namespaceCode") String namespaceCode,

             @WebParam(name = "roleName") String roleName, @WebParam(name = "qualification") @XmlJavaTypeAdapter(

             value = MapStringStringAdapter.class) Map<String, String> qualification)

             throws RiceIllegalArgumentException;

     /**

      * Returns a list of role qualifiers that the given principal.  If the principal's membership

      * is via a group or role, that group or role's qualifier on the given role is returned.

      */

     @WebMethod(operationName = "getNestedRoleQualifersForPrincipalByNamespaceAndRolename")

     @XmlElementWrapper(name = "attributes", required = true)

     @XmlElement(name = "attribute", required = false)

     @WebResult(name = "attributes")

     @XmlJavaTypeAdapter(value = MapStringStringAdapter.class)

         List<Map<String, String>> getNestedRoleQualifersForPrincipalByNamespaceAndRolename(

             @WebParam(name = "principalId") String principalId, @WebParam(name = "namespaceCode") String namespaceCode,

             @WebParam(name = "roleName") String roleName, @WebParam(name = "qualification") @XmlJavaTypeAdapter(

             value = MapStringStringAdapter.class) Map<String, String> qualification)

             throws RiceIllegalArgumentException;

     /**

      * Returns a list of role qualifiers that the given principal.  If the principal's membership

      * is via a group or role, that group or role's qualifier on the given role is returned.

      */

     @WebMethod(operationName = "getNestedRoleQualifiersForPrincipalByRoleIds")

     @XmlElementWrapper(name = "attributes", required = true)

     @XmlElement(name = "attribute", required = false)

     @WebResult(name = "attributes")

     @XmlJavaTypeAdapter(value = MapStringStringAdapter.class)

         List<Map<String, String>> getNestedRoleQualifiersForPrincipalByRoleIds(

             @WebParam(name = "principalId") String principalId, @WebParam(name = "roleIds") List<String> roleIds,

             @WebParam(name = "qualification") @XmlJavaTypeAdapter(

                     value = MapStringStringAdapter.class) Map<String, String> qualification)

             throws RiceIllegalArgumentException;

     // --------------------

     // Role Membership Checks

     // --------------------

     /**

      * Get all the role members (groups and principals) associated with the given list of roles

      * where their role membership/assignment matches the given qualification.  The list of RoleMemberships returned

      * will only contain group and principal members.  Any nested role members will be resolved and flattened into

      * the principals and groups that are members of that nested role (assuming qualifications match).

      *

      * The return object will have each membership relationship along with the delegations

      *

      */

     @WebMethod(operationName = "getRoleMembers")

     @XmlElementWrapper(name = "roleMemberships", required = true)

     @XmlElement(name = "roleMembership", required = false)

     @WebResult(name = "roleMemberships")

     List<RoleMembership> getRoleMembers( @WebParam(name="roleIds") List<String> roleIds,

             @WebParam(name="qualification")@XmlJavaTypeAdapter(value = MapStringStringAdapter.class) Map<String, String> qualification )

             throws RiceIllegalArgumentException;

     /**

          * This method gets all the members, then traverses down into members of type role and group to obtain the nested principal ids

          *

          * @return list of member principal ids

          */

     @WebMethod(operationName = "getRoleMemberPrincipalIds")

     @XmlElementWrapper(name = "principalIds", required = true)

     @XmlElement(name = "principalId", required = false)

     @WebResult(name = "principalIds")

     Collection<String> getRoleMemberPrincipalIds(@WebParam(name="namespaceCode") String namespaceCode,

             @WebParam(name="roleName") String roleName,

             @WebParam(name="qualification") @XmlJavaTypeAdapter(value = MapStringStringAdapter.class) Map<String, String> qualification)

             throws RiceIllegalArgumentException;

     /**

      * Returns whether the given principal has any of the passed role IDs with the given qualification.

      */

     @WebMethod(operationName = "principalHasRole")

     @WebResult(name = "principalHasRole")

     boolean principalHasRole( @WebParam(name="principalId") String principalId,

             @WebParam(name="roleIds") List<String> roleIds,

             @WebParam(name="qualification") @XmlJavaTypeAdapter(value = MapStringStringAdapter.class) Map<String, String> qualification )

             throws RiceIllegalArgumentException;

     /**

      * Returns the subset of the given principal ID list which has the given role and qualification.

      * This is designed to be used by lookups of people by their roles.

      */

     @WebMethod(operationName = "getPrincipalIdSubListWithRole")

     @XmlElementWrapper(name = "principalIds", required = true)

     @XmlElement(name = "principalId", required = false)

     @WebResult(name = "principalIds")

     List<String> getPrincipalIdSubListWithRole( @WebParam(name="principalIds") List<String> principalIds,

             @WebParam(name="roleNamespaceCode") String roleNamespaceCode,

             @WebParam(name="roleName") String roleName,

             @WebParam(name="qualification") @XmlJavaTypeAdapter(value = MapStringStringAdapter.class) Map<String, String> qualification )

             throws RiceIllegalArgumentException;

     /**

          *

          * This method gets search results for role lookup

          */

     @WebMethod(operationName = "getRolesSearchResults")

     @WebResult(name = "results")

         RoleQueryResults findRoles(@WebParam(name = "query") QueryByCriteria queryByCriteria) throws RiceIllegalArgumentException;

     /**

      * Gets all direct members of the roles that have ids within the given list

      * of role ids.  This method does not recurse into any nested roles.

      *

      *  <p>The resulting List of role membership will contain membership for

      *  all the roles with the specified ids.  The list is not guaranteed to be

      *  in any particular order and may have membership info for the

      *  different roles interleaved with each other.

      */

     @WebMethod(operationName = "getFirstLevelRoleMembers")

     @XmlElementWrapper(name = "roleMemberships", required = true)

     @XmlElement(name = "roleMembership", required = false)

     @WebResult(name = "roleMemberships")

     @Cacheable(value=RoleMembership.Cache.NAME, key="'roleIds=' + T(org.kuali.rice.core.api.cache.CacheKeyUtils).key(#p0)")

         List<RoleMembership> getFirstLevelRoleMembers(@WebParam(name="roleIds") List<String> roleIds) throws RiceIllegalArgumentException;

         /**

          * Gets role member information based on the given search criteria.  The

          * map of criteria contains attributes of RoleMembership as it's

          * key and the values to search on as the value.

          */

     @WebMethod(operationName = "findRoleMemberships")

     @WebResult(name = "results")

         RoleMembershipQueryResults findRoleMemberships(@WebParam(name = "query") QueryByCriteria queryByCriteria) throws RiceIllegalArgumentException;

         /**

          * Gets a list of Roles that the given member belongs to.

          */

     @WebMethod(operationName = "getMemberParentRoleIds")

     @XmlElementWrapper(name = "roleIds", required = true)

     @XmlElement(name = "roleId", required = false)

     @WebResult(name = "roleIds")

     @Cacheable(value=RoleMembership.Cache.NAME, key="'memberType=' + #p0 + '|' + 'memberId=' + #p1")

         List<String> getMemberParentRoleIds(String memberType, String memberId) throws RiceIllegalArgumentException;

     @WebMethod(operationName = "findRoleMembers")

     @WebResult(name = "results")

         RoleMemberQueryResults findRoleMembers(@WebParam(name = "query") QueryByCriteria queryByCriteria) throws RiceIllegalArgumentException;

     @WebMethod(operationName = "getRoleTypeRoleMemberIds")

     @XmlElementWrapper(name = "memberIds", required = true)

     @XmlElement(name = "memberId", required = false)

     @WebResult(name = "memberIds")

     @Cacheable(value=RoleMember.Cache.NAME, key="'{getRoleTypeRoleMemberIds} + 'roleId=' + #p0")

     Set<String> getRoleTypeRoleMemberIds(@WebParam(name = "roleId") String roleId) throws RiceIllegalArgumentException;

     @WebMethod(operationName = "findDelegateMembers")

     @WebResult(name = "results")

     DelegateMemberQueryResults findDelegateMembers(@WebParam(name = "query") QueryByCriteria queryByCriteria) throws RiceIllegalArgumentException;

         /**

          * Gets delegation member information based on the given search criteria.  The

          * map of criteria contains attributes of Delegate as it's

          * key and the values to search on as the value.

          */

     @WebMethod(operationName = "getDelegationMembersByDelegationId")

     @XmlElementWrapper(name = "delegateMembers", required = true)

     @XmlElement(name = "delegateMember", required = false)

     @WebResult(name = "delegateMembers")

     @Cacheable(value=DelegateMember.Cache.NAME, key="'delegateId=' + #p0")

     List<DelegateMember> getDelegationMembersByDelegationId(

             @WebParam(name = "delegateId") String delegateId) throws RiceIllegalArgumentException;

     @WebMethod(operationName = "getDelegationMemberByDelegationAndMemberId")

     @WebResult(name = "delegateMember")

     @Cacheable(value=DelegateMember.Cache.NAME, key="'delegateId=' + #p0 + '|' + 'memberId=' + #p1")

     DelegateMember getDelegationMemberByDelegationAndMemberId(

             @WebParam(name = "delegationId") String delegationId, @WebParam(name = "memberId") String memberId) throws RiceIllegalArgumentException;

     @WebMethod(operationName = "getDelegationMemberById")

     @WebResult(name = "delegateMember")

     @Cacheable(value=DelegateMember.Cache.NAME, key="'id=' + #p0")

     DelegateMember getDelegationMemberById(@WebParam(name = "id") String id) throws RiceIllegalArgumentException;

     @WebMethod(operationName = "getRoleResponsibilities")

     @XmlElementWrapper(name = "roleResponsibilities", required = true)

     @XmlElement(name = "roleResponsibility", required = false)

     @WebResult(name = "roleResponsibilities")

     @Cacheable(value=RoleResponsibility.Cache.NAME, key="'roleId=' + #p0")

         List<RoleResponsibility> getRoleResponsibilities(@WebParam(name="roleId") String roleId)  throws RiceIllegalArgumentException;

     @WebMethod(operationName = "getRoleMemberResponsibilityActions")

     @XmlElementWrapper(name = "roleResponsibilityActions", required = true)

     @XmlElement(name = "roleResponsibilityAction", required = false)

     @WebResult(name = "roleResponsibilityActions")

     @Cacheable(value=RoleResponsibility.Cache.NAME, key="'roleMemberId=' + #p0")

         List<RoleResponsibilityAction> getRoleMemberResponsibilityActions(

             @WebParam(name = "roleMemberId") String roleMemberId)  throws RiceIllegalArgumentException;

     @WebMethod(operationName = "getDelegateTypeByRoleIdAndDelegateTypeCode")

     @WebResult(name = "delegateType")

     @Cacheable(value=DelegateType.Cache.NAME, key="'roleId=' + #p0 + '|' + 'code=' + #p1")

     DelegateType getDelegateTypeByRoleIdAndDelegateTypeCode(@WebParam(name = "roleId") String roleId,

             @WebParam(name = "delegateType") DelegationType delegateType)  throws RiceIllegalArgumentException;

     @WebMethod(operationName = "getDelegateTypeByDelegationId")

     @WebResult(name = "delegateType")

     @Cacheable(value=DelegateType.Cache.NAME, key="'delegationId=' + #p0")

     DelegateType getDelegateTypeByDelegationId(@WebParam(name = "delegationId") String delegationId)  throws RiceIllegalArgumentException;

     /**

          * Assigns the principal with the given id to the role with the specified

          * namespace code and name with the supplied set of qualifications.

          */

     @WebMethod(operationName = "assignPrincipalToRole")

     @CacheEvict(value={Role.Cache.NAME, RoleMembership.Cache.NAME, RoleMember.Cache.NAME, DelegateMember.Cache.NAME, RoleResponsibility.Cache.NAME, DelegateType.Cache.NAME }, allEntries = true)

     void assignPrincipalToRole(@WebParam(name="principalId") String principalId,

                     @WebParam(name="namespaceCode") String namespaceCode,

                     @WebParam(name="roleName") String roleName,

                     @WebParam(name="qualifications") @XmlJavaTypeAdapter(value = MapStringStringAdapter.class) Map<String, String> qualifications) throws RiceIllegalArgumentException;

         /**

          * Assigns the group with the given id to the role with the specified

          * namespace code and name with the supplied set of qualifications.

          */

     @WebMethod(operationName = "assignGroupToRole")

     @CacheEvict(value={Role.Cache.NAME, RoleMembership.Cache.NAME, RoleMember.Cache.NAME, DelegateMember.Cache.NAME, RoleResponsibility.Cache.NAME, DelegateType.Cache.NAME }, allEntries = true)

     void assignGroupToRole(@WebParam(name="groupId") String groupId,

                     @WebParam(name="namespaceCode") String namespaceCode,

                     @WebParam(name="roleName") String roleName,

                     @WebParam(name="qualifications") @XmlJavaTypeAdapter(value = MapStringStringAdapter.class) Map<String, String> qualifications) throws RiceIllegalArgumentException;

         /**

          * Assigns the role with the given id to the role with the specified

          * namespace code and name with the supplied set of qualifications.

          */

     @WebMethod(operationName = "assignRoleToRole")

     @CacheEvict(value={Role.Cache.NAME, RoleMembership.Cache.NAME, RoleMember.Cache.NAME, DelegateMember.Cache.NAME, RoleResponsibility.Cache.NAME, DelegateType.Cache.NAME }, allEntries = true)

     void assignRoleToRole(@WebParam(name="roleId") String roleId,

                     @WebParam(name="namespaceCode") String namespaceCode,

                     @WebParam(name="roleName") String roleName,

                     @WebParam(name="qualifications") @XmlJavaTypeAdapter(value = MapStringStringAdapter.class) Map<String, String> qualifications) throws RiceIllegalArgumentException;

         /**

          * Creates a new RoleMember.  Needs to be passed a valid RoleMember object that does not currently exist.

          */

     @WebMethod(operationName = "createRoleMember")

     @WebResult(name = "roleMember")

     @CacheEvict(value={Role.Cache.NAME, RoleMembership.Cache.NAME, RoleMember.Cache.NAME, DelegateMember.Cache.NAME, RoleResponsibility.Cache.NAME, DelegateType.Cache.NAME }, allEntries = true)

     RoleMember createRoleMember(@WebParam(name = "roleMember") RoleMember roleMember) throws RiceIllegalArgumentException, RiceIllegalStateException;

     /**

          * Assigns the role with the given id to the role with the specified

          * namespace code and name with the supplied set of qualifications.

          */

     @WebMethod(operationName = "updateRoleMember")

     @WebResult(name = "roleMember")

     @CacheEvict(value={Role.Cache.NAME, RoleMembership.Cache.NAME, RoleMember.Cache.NAME, DelegateMember.Cache.NAME, RoleResponsibility.Cache.NAME, DelegateType.Cache.NAME }, allEntries = true)

     RoleMember updateRoleMember(@WebParam(name = "roleMember") RoleMember roleMember) throws RiceIllegalArgumentException, RiceIllegalStateException;

     @WebMethod(operationName = "createRoleResponsibilityAction")

     @CacheEvict(value={Role.Cache.NAME, RoleMembership.Cache.NAME, RoleMember.Cache.NAME, DelegateMember.Cache.NAME, RoleResponsibility.Cache.NAME, DelegateType.Cache.NAME }, allEntries = true)

     RoleResponsibilityAction createRoleResponsibilityAction(@WebParam(name = "roleResponsibilityAction") RoleResponsibilityAction roleResponsibilityAction) throws RiceIllegalArgumentException;

         /**

          * Assigns the member with the given id as a delegation member to the role

          * with the specified namespace code and name with the supplied set of qualifications.

          */

     @WebMethod(operationName = "createDelegateType")

     @CacheEvict(value={Role.Cache.NAME, RoleMembership.Cache.NAME, RoleMember.Cache.NAME, DelegateMember.Cache.NAME, RoleResponsibility.Cache.NAME, DelegateType.Cache.NAME }, allEntries = true)

     DelegateType createDelegateType(@WebParam(name="delegateType") DelegateType delegateType) throws RiceIllegalArgumentException, RiceIllegalStateException;

     /**

          * Updates a delegation type, including attached members

          */

     @WebMethod(operationName = "updateDelegateType")

     @CacheEvict(value={Role.Cache.NAME, RoleMembership.Cache.NAME, RoleMember.Cache.NAME, DelegateMember.Cache.NAME, RoleResponsibility.Cache.NAME, DelegateType.Cache.NAME }, allEntries = true)

     DelegateType updateDelegateType(@WebParam(name="delegateType") DelegateType delegateType) throws RiceIllegalArgumentException, RiceIllegalStateException;

     /**

      * Remove the principal with the given id and qualifications from the role

      * with the specified namespace code and role name.

      */

     @WebMethod(operationName = "removePrincipalFromRole")

     @CacheEvict(value={Role.Cache.NAME, RoleMembership.Cache.NAME, RoleMember.Cache.NAME, DelegateMember.Cache.NAME, RoleResponsibility.Cache.NAME, DelegateType.Cache.NAME }, allEntries = true)

     void removePrincipalFromRole(@WebParam(name="principalId") String principalId,

                     @WebParam(name="namespaceCode") String namespaceCode,

                     @WebParam(name="roleName") String roleName,

                     @WebParam(name="qualifications") @XmlJavaTypeAdapter(value = MapStringStringAdapter.class) Map<String, String> qualifications) throws RiceIllegalArgumentException;

     /**

      * Remove the group with the given id and qualifications from the role

      * with the specified namespace code and role name.

      */

     @WebMethod(operationName = "removeGroupFromRole")

     @CacheEvict(value={Role.Cache.NAME, RoleMembership.Cache.NAME, RoleMember.Cache.NAME, DelegateMember.Cache.NAME, RoleResponsibility.Cache.NAME, DelegateType.Cache.NAME }, allEntries = true)

     void removeGroupFromRole(@WebParam(name="groupId") String groupId,

                     @WebParam(name="namespaceCode") String namespaceCode,

                     @WebParam(name="roleName") String roleName,

                     @WebParam(name="qualifications") @XmlJavaTypeAdapter(value = MapStringStringAdapter.class) Map<String, String> qualifications) throws RiceIllegalArgumentException;

     /**

      * Remove the group with the given id and qualifications from the role

      * with the specified namespace code and role name.

      */

     @WebMethod(operationName = "removeRoleFromRole")

     @CacheEvict(value={Role.Cache.NAME, RoleMembership.Cache.NAME, RoleMember.Cache.NAME, DelegateMember.Cache.NAME, RoleResponsibility.Cache.NAME, DelegateType.Cache.NAME }, allEntries = true)

     void removeRoleFromRole(@WebParam(name="roleId") String roleId,

                     @WebParam(name="namespaceCode") String namespaceCode,

                     @WebParam(name="roleName") String roleName,

                     @WebParam(name="qualifications") @XmlJavaTypeAdapter(value = MapStringStringAdapter.class) Map<String, String> qualifications) throws RiceIllegalArgumentException;

     /**

      * Assigns the given permission to the given role

      */

     @WebMethod(operationName = "assignPermissionToRole")

     @CacheEvict(value={Role.Cache.NAME, RoleMembership.Cache.NAME, RoleMember.Cache.NAME, DelegateMember.Cache.NAME, RoleResponsibility.Cache.NAME, DelegateType.Cache.NAME }, allEntries = true)

     void assignPermissionToRole(@WebParam(name = "permissionId") String permissionId, @WebParam(name = "roleId") String roleId) throws RiceIllegalArgumentException;

 }